dmj

query the 123reg server directly using dig/nslookup. Is the TXT record there? If it exists and just isn't propagating then it's 123reg's issue. It sounds like you are doing this manually? this needs to be automated.

Have you tried the usual things like comparing the CPU/Memory/IO/Network usage from before the issue occurred to now, and see if you can correlate that with a processID ?

It should be possible to do this, but you shouldn't need to. If you do you will need an SFP module that you can re-program the serial number and the vendor ID to match the serial/vendor that the ISP expects, you'll also need to know what the serial/vendor ID is - which you usually get from the equipment that the ISP supplies ! You'd only do this if the supplier sends crappy equipment and you need to replace it for something more reliable.

'making' in this context just means copying in this context (copying from the wire to memory, disk or rendering). Presumably the police forensics are excluded from this definition when they clone a phone, I guess the same would apply to those storing copies assuming they have the legal basis to do so. I doubt it's been tested in court.

You would be surprised what users get up to ! This is a real concern, for a school. Linux engineers tend to earn a *lot* more than windows engineers simply because there are fewer of them and a significant proportion of the worlds systems rely on linux. Staff retention would be an issue. I'm not saying anyone can just jump onto windows server and be competent, but fundamentally they are not that different between learning how to manage the two. For end users the trouble isn't so bad, it's really an issue for power users. People said that the transition from Win7 to Chromebooks would be an issue for user training but in the end it wasn't as most people just use applications, not the OS

You're twisting things, neither of those things are true. The DfE guidance is dumbed down, an intelligent chap like yourself isn't supposed to take it so literally. You are allowed to think outside the box.

I already called BS on this comment in another thread. The DfE doesn't say this it needs to run on the device at all otherwise all Calculators, data collectors, cameras, IoT devices, raspberry pi's would be instantly banned.

I've run linux machines in Universities, schools and in 'industry'. It doesn't get any traction on this forum because the entire sector is already heavily geared towards windows. The barrier to adoption is knowledge. People confuse 'hard/difficult/unsuitable' with not knowing how to do something. It usually boils down to the politics of a single piece of software in my experience, not any actual technical problem - they were mostly solved a decade ago.

Do customers get API access, or is that restricted to 'partners' in any way?

There's a pertinent article about how internal powers at microsoft actively block security initiatives, in this case leading to US govt compromise in the 'solarwinds' incident. https://www.propublica.org/article/microsoft-solarwinds-golden-saml-data-breach-russian-hackers

We did this in the past: The display in the girls changing room lasted quite well, but the boys room was a different story. Replaced several times - footballs were usually the cause (muddy footballs leave prints!). This was in a Good (technically outstanding) school in a middle class area. Be sure to buy some spares if you can't afford one of these

Same, still have my PC60 Lian-Li. Albeit empty and in the garage. Current keyboard is a tiny 60% mechanical keyboard - for RSI reasons, those 'ergonomic' KB's don't work for me as they are still too big and I find my fingers stretching too much, it's better for me to have a smaller kb with more shortcuts. Can't beat a logitech MX master mouse

I agree, which makes it all the more disappointing that they offer so little reward, essentially to find a bug in an undocumented api so they can win a case against a competitor.

You could read it as ESS documentation is not up to scratch, and if that's the case then I'm not going to spend x hours on bruteforcing the api endpoints for something that I might not find.

Disagree. The database structure itself is defined in code (SQL) . IANAL but I think this is what ESS claim.

2) ESS are claiming, rightly or wrongly that the SQL that defines the database is their code. 4)The API sucks, and cannot extract certain data that schools need, which is what Bromcom are trying to point out in this PR exercise. ESS will probably be able to respond that the data is readily extractable using an open (ish) format (PDF).

Congrats. £1000 on it's way to you. Sell it to ESS for £50,000 before they read this!

Even better! I'm not sure how much use vscode is going to be for schools. I think the teachers who like 'industry standard' apps will like it, but from an educational point of view Jupyter has a much better way of integrating documentation and explanations with pictures etc. (granted you can do that with markdown view in vscode). It's just less obvious for students.

You can self host this if you want to restrict web access https://github.com/coder/code-server Interestingly, did you know github has the same functionality - once logged into github hold shift and press dot <.>

I think the idea that you shouldn't have swap/paging comes from containerised environments, rather than virtualised. Even that is changing with kubernetes swap on (although it doesn't support windows yet).

With vertex you'd use a single machine with multiple jupyter workbooks for each student, which would be much more cost effective.

this type of thing is usually worded as a 'contribution' rather than a fee to get around the legal aspect of charging for educational resources.

I somewhat agree, they are under no obligation whatsoever. Jon said that they won't help others on the forum for free unless we pay for their consultancy services. I guess that's fair enough, they are an MSP/consultancy and sell their services. I can understand why they don't want the geeks here knowing their innermost secrets - they don't want to turn it into 'entertainment'. I can imagine the backlash here if it tuned out to be something that we (collectively) had been mitigating against already, and if it isn't then it would certainly benefit us. Personally I prefer a more open approach like in the links I supplied earlier. Do any customers actually know what happened or is it under NDA?

FWIW: Here are some excellent examples of public post mortems for incidents. https://blog.cloudflare.com/searchresults#q=post%20mortem&sort=relevancy including security breaches: https://blog.cloudflare.com/post-mortem-todays-attack-apparent-google-app/ They are well worth a read, it would be great if Millgate were a bit more forthcoming as well.

Sorry you're under orders not to divulge anything useful for the community. It sounds like Millgate either never actually understood the exploit, or it was so trivial they won't admit to it publicly. Personally I'd just have kept quiet if you're not able to offer any details that don't sound like PR, but hey thanks for telling us what you were allowed to say.